MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ad9c88808cd06cd543fc1e62dac19acd053c192532321f302ba357cb01eadb45. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	ad9c88808cd06cd543fc1e62dac19acd053c192532321f302ba357cb01eadb45
SHA3-384 hash:	77d2f7e827b6f66a5d03c0bf0164ec31fe4a86a536f812f52f98a11a82e6f13ba7496e4bb118bda79b54f51d7792bc19
SHA1 hash:	7fcda8893c196e666416e20bd71b6aeb8386451f
MD5 hash:	0730f7baadea2204a3361a4dc1f3c6af
humanhash:	tennis-mobile-colorado-idaho
File name:	tankdupe-1.10.0+1.21.4.jar
Download:	download sample
Signature	SilentNet Alert Create hunting rule
File size:	109'370 bytes
First seen:	2026-09-17 21:15:41 UTC
Last seen:	Never
File type:	jar
MIME type:	application/zip
ssdeep	3072:mBGh6BzZrzOvj+UDwXeFH+8UCnYdXfB7Vi9gHeikNB7kAO5:mBGkZRit3I8LOp7/lG1g
TLSH	T1C7B3020C5ACA257EEBBF3275D6AB8F7D182A82B0C5409A7C4F9518528FC74235ED204A
TrID	77.1% (.JAR) Java Archive (13500/1/2) 22.8% (.ZIP) ZIP compressed archive (4000/1)
Magika	jar
Reporter	wok
Tags:	jar java Python SilentNet

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

98

Origin country :

IN

Vendor Threat Intelligence

ACCE Unknown

No detections

ANY.RUN Malicious

Malware family:

n/a

ID:

1

File name:

tankdupe-1.10.0+1.21.4.jar

Verdict:

Malicious activity

Analysis date:

2026-09-17 20:31:53 UTC

Tags:

silentnet stealer python arch-exec arch-doc evasion auto generic openssl tool

Link:

https://app.any.run/tasks/401a34fc-f69d-4553-b80b-1c71279db26c

Note:

ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample

CAPE Sandbox

Detection:

n/a

Link:

https://www.capesandbox.com/analysis/86334/

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  2.5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6aac58a4cf451ab4a9de84ca/reports/49242d32-1f71-4c4d-9752-fb75e4d9e728/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/ad9c88808cd06cd543fc1e62dac19acd053c192532321f302ba357cb01eadb45

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

ARCHIVE

Link:

https://malprob.io/report/ad9c88808cd06cd543fc1e62dac19acd053c192532321f302ba357cb01eadb45

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/ad9c88808cd06cd543fc1e62dac19acd053c192532321f302ba357cb01eadb45/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=vwoiraem2bwnkq74dzrnvqm2zuctygjfgizb6mblunl4wapk3ncq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260917-z4k2bayfjb/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Suspicious File

Threat name:

Suspicious File

Score:

0.35

Link:

https://yomi.yoroi.company/submissions/ad9c88808cd06cd543fc1e62dac19acd053c192532321f302ba357cb01eadb45

File information

---

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

SilentNet

jar ad9c88808cd06cd543fc1e62dac19acd053c192532321f302ba357cb01eadb45

(this sample)

any.run

https://app.any.run/tasks/401a34fc-f69d-4553-b80b-1c71279db26c

  

Dropping

SilentNet

  

Delivery method

Distributed via web download

Cape

https://www.capesandbox.com/analysis/86334/